All Questions
Tagged with data-protection personal-information
17 questions
1
vote
2
answers
197
views
Does a company have an obligation to attempt to answer a GDPR request if the requestor may not have provided sufficient identification information?
An individual has asked to provide information on his personal data which is stored by a company (GDPR). He has only provided his name and surname. He has signed the document electronically, i.e., we ...
- 175
2
votes
2
answers
189
views
Is analysis of personal data without saving considered data processing?
One of GDPR's main topics is processing data. Article 4 tells:
(2) ‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or ...
- 175
3
votes
5
answers
1k
views
Standards for data availability for internal employees
Our organization possesses a lot of personal data, and when we provide the data to external partners we are very strict on complying with all the data confidentiality rules, recommendations, etc. The ...
- 175
1
vote
1
answer
73
views
Does 2 party consent apply if the data is anonymized?
If I have a text conversation between myself and another party, both of whom reside in 2 party consent states in the US, if I remove all reasonably identifying information, do I still need consent ...
- 244
3
votes
0
answers
57
views
Search engine data breaches, osint
Such a search engine that is deliberately created for the purpose of collecting open source information about security related incidents including data breaches and including a link to the source that ...
- 53
0
votes
1
answer
362
views
Is OpenAI/ChatGPT compliant with GDPR, if they don't allow changing or removing the Phone Number and Email Address?
Italy has recently banned ChatGPT, and is now allowing it again in the country, after they implemented a few privacy controls.
The fact that it's now allowed again makes me wonder if Italy (and the ...
- 47
10
votes
2
answers
2k
views
GDPR - Are technical identifiers personal data?
I've built devices for an internet service provider company (in EU) to measure internet speed at subscribers' home. The devices are used by company technicians when fixing network speed problems ...
- 203
2
votes
1
answer
209
views
What legal actions can we take for website that doesn't remove PII upon requests?
A business directory listing website scraped old data for their listings. They use random contact information, personally identifiable information (PII), logos/banners to falsely represent those ...
- 338
10
votes
4
answers
5k
views
Is there a way to determine if an email address is personal information?
The GDPR defines personal data as:
Personal data is information that relates to an identified or identifiable individual.
My understanding is that this means that [email protected] is ...
- 9,354
2
votes
2
answers
143
views
GDPR and personal data reselling
The situation is following:
I had an account in company A which then was sold to company B, both conduct online services.
I wasn't aware of this because I didn't log in to my account for several years,...
- 145
1
vote
1
answer
199
views
Under GDPR can a company give out the demographics of employees e.g. ethnic background without anonymising it?
If a client asks for the demographics of a company's employees e.g. female to male ratio or ethnicity. Does this have to be anonymised so it is compliant with the GDPR or can the names be revealed?
- 231
9
votes
1
answer
1k
views
Denied Data Subject Access Request (DSAR) due to third-party information
A while ago I made a data subject access request (DSAR, asking for personal information which is stored about me) which was part of an ongoing complaint. In a nutshell, I did a complaint to a company ...
- 231
0
votes
1
answer
99
views
Is there generally a duration after which a permission given to a person is terminated automatically?
Consider the following as an example:
Jack and Sam were both 18 years old. At the time, both were good friends, and Jack has given Sam permission to use his e-mail account for sending and reading e-...
- 103
2
votes
1
answer
587
views
GDPR - Are the typical lists of examples for personal data misleading?
Article 4 of the EU GDPR states
‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’);
The explanation for the term ‘personal data’ as
...
- 123
0
votes
1
answer
62
views
Can I use an Employee's Personal ID in an company internal project? (EU Data protection Law)
I want to create an Order-Website for our company, where employees can order dishes from the canteen, so they know roughly how much food to order.
Now the question came up, if you order some dish, but ...
5
votes
1
answer
1k
views
UK: What information are the police legally required to collect when going door-to-door, and why?
A few days ago, a police officer knocked on my door in the evening and asked whether I had noticed any disturbances in my street earlier in the day - he said it was in relation to reports that they'd ...
- 175
0
votes
1
answer
1k
views
Twitter and account deactivation - Do you have to explicitly ask for account to be deleted if company nowhere says that it will do so? [duplicate]
I am trying to delete my Twitter account.
Twitter only has a "deactivate" account button, and no "delete" account button, as I posted here.
It looks like in the guides posted by ...
- 1,636